PT-2025-8655 · Linux+2 · Linux Kernel+2

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49722

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A memory corruption issue in the VF driver of the Linux kernel has been resolved. The issue occurred when the VF driver assumed that the VF was disabled while it still had queues configured, leading to the VF unmapping DMA resources and causing memory corruption. This corruption could result in a crash. The issue is related to the iavf driver and the iavf adminq task function.

Recommendations As a temporary workaround, consider disabling the iavf driver until a patch is available. Restrict access to the iavf adminq task function to minimize the risk of exploitation. Update to a newer version of the Linux kernel that includes the fix for this issue.

Exploit

Fix

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

AZL-68805

BDU:2026-03743

CVE-2022-49722

RHSA-2022:6460

RHSA-2022:6610

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Debian

Linux Kernel

Suse

References · 1334

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49722.json · Exploit
• https://osv.dev/vulnerability/AZL-68805 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49722 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49722 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/efe41860008e57fb6b69855b4b93fdf34bc42798 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49722 · Security Note
• https://git.kernel.org/stable/c/1bb8253b1dd44cf004e12c333acc6f25ee286cf3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49722 · Security Note
• https://bdu.fstec.ru/vul/2026-03743 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49722 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49722 · Vendor Advisory